Vulnerabilities in Perfmatters
6 resultsCVE-2026-4350HIGHPerfmatters <= 2.5.9.1 - Authenticated (Subscriber+) Arbitrary File Deletion via 'delete' ParameterEPSS 0.7%CVE-2023-47876HIGHWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2026-4351HIGHPerfmatters <= 2.5.9 - Authenticated (Subscriber+) Arbitrary File Overwrite via 'snippets' ParameterEPSS 0.4%CVE-2023-47874MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Broken Access ControlEPSS 0.4%CVE-2023-47877MEDIUMWordPress Perfmatters Plugin < 2.2.0 is vulnerable to Cross Site Scripting (XSS)EPSS 0.4%CVE-2023-47875MEDIUMWordPress Perfmatters Plugin <= 2.1.6 is vulnerable to Cross Site Request Forgery (CSRF)EPSS 0.2%